$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d14ed318-2538-35d3-96fa-1197db11804b.roa File: d14ed318-2538-35d3-96fa-1197db11804b.roa (raw, json) Hash identifier: 1AyW4LKpyS3+f2y/EwwnPRoUSzrIA+2BsTMCbHP/UAQ= Subject key identifier: 41:CA:03:A4:A5:74:83:28:DF:C5:27:AD:8B:E5:4F:F4:8B:AA:D7:86 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B6BC779C5512550C241E7A980 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d14ed318-2538-35d3-96fa-1197db11804b.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 396551 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:79:c5:51:25:50:c2:41:e7:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=8b191d37-c238-42a6-b291-0ddf75ae6f2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:6c:d4:47:ad:92:50:60:f9:ae:2e:01:b2:1d: fa:79:d0:52:10:88:75:35:10:5c:af:c8:1b:b7:cf: fe:8c:4a:76:ad:8a:a7:b1:6b:78:13:19:77:d1:9f: 6f:fb:c0:87:eb:89:fc:40:33:6f:0f:dc:ef:9b:c4: df:3c:7b:c4:55:ed:9a:6a:d5:95:73:e2:fc:64:48: f6:82:20:2d:24:17:cf:5e:8d:2c:0b:27:0b:68:a0: 50:4b:cf:ce:cc:7d:ff:a0:5b:bb:15:bd:92:e2:59: 4c:74:8c:9a:be:fb:f0:fa:ba:a1:1a:04:3d:e4:c0: c2:c0:ee:8d:73:6e:11:73:29:8d:3d:53:9b:a2:b7: 7c:a5:63:09:88:84:80:f0:25:73:3b:f2:40:af:bc: fc:d2:04:c0:21:40:cc:d2:b4:b2:77:bc:71:b3:79: 8f:8c:62:cf:14:c7:54:39:ae:03:19:de:cf:ce:ea: 35:24:27:19:08:66:40:06:42:b3:57:85:f5:77:fd: 62:ef:d2:2a:46:a0:c7:2e:c6:97:20:5f:1e:0f:29: f2:cf:35:0e:26:5a:f1:4d:6e:66:2f:fa:d0:44:01: 61:fb:d2:c2:81:dc:f0:ea:f5:c3:6d:5a:20:fc:54: 25:40:63:ed:12:13:e8:27:c2:8c:0d:44:fe:8f:ae: 95:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:CA:03:A4:A5:74:83:28:DF:C5:27:AD:8B:E5:4F:F4:8B:AA:D7:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d14ed318-2538-35d3-96fa-1197db11804b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:a2:de:d9:9c:37:6b:1f:22:a9:82:31:5d:24:00:ef:6d:4c: 5e:3e:50:2d:f6:d7:a1:d9:81:f8:fa:d0:65:46:b9:e1:6e:f3: cd:4d:5e:dd:7d:07:5b:48:16:c2:b6:2f:ca:40:df:90:2b:60: ca:70:28:9e:4a:b9:fd:57:51:42:19:00:08:b6:fd:0b:c8:c9: c9:11:59:13:9c:f6:af:69:3f:96:ff:44:5a:63:a2:36:49:9d: e4:dd:e6:6e:d0:85:71:a6:1a:44:90:28:83:dc:c0:26:10:ac: 48:d2:42:21:53:35:16:89:39:1c:9f:d7:b3:b2:ac:e9:ab:af: ad:c4:16:ba:24:4a:be:07:7c:96:27:e6:26:aa:03:3d:42:9b: 3c:95:c7:12:c8:67:6f:dc:8f:b2:37:80:4d:c5:fc:01:c2:1a: d8:5c:1d:41:0a:58:5a:52:79:7e:bd:f3:df:65:63:ab:fb:97: 1c:dc:9e:72:71:68:28:4a:26:c9:ea:d6:1a:e7:ee:8e:6a:dc: 59:a6:5d:11:6f:ec:d9:de:6a:70:47:5d:c2:86:b1:02:18:c3: ad:f2:58:8d:20:65:3f:79:6d:09:d5:87:95:41:f6:cd:3c:da: de:73:40:9f:05:2a:ce:e4:cc:2e:fb:39:ef:e0:1c:59:ad:b4: d2:fa:3d:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx3nFUSVQwkHnqYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk OGIxOTFkMzctYzIzOC00MmE2LWIyOTEtMGRkZjc1YWU2ZjJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2zUR62SUGD5ri4Bsh36edBSEIh1NRBcr8gb t8/+jEp2rYqnsWt4Exl30Z9v+8CH64n8QDNvD9zvm8TfPHvEVe2aatWVc+L8ZEj2 giAtJBfPXo0sCycLaKBQS8/OzH3/oFu7Fb2S4llMdIyavvvw+rqhGgQ95MDCwO6N c24RcymNPVObord8pWMJiISA8CVzO/JAr7z80gTAIUDM0rSyd7xxs3mPjGLPFMdU Oa4DGd7Pzuo1JCcZCGZABkKzV4X1d/1i79IqRqDHLsaXIF8eDynyzzUOJlrxTW5m L/rQRAFh+9LCgdzw6vXDbVog/FQlQGPtEhPoJ8KMDUT+j66V0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEHKA6SldIMo38UnrYvlT/SLqteGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDE0ZWQzMTgtMjUzOC0z NWQzLTk2ZmEtMTE5N2RiMTE4MDRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE6i3tmcN2sfIqmCMV0kAO9tTF4+UC3216HZgfj60GVGueFu881NXt19 B1tIFsK2L8pA35ArYMpwKJ5Kuf1XUUIZAAi2/QvIyckRWROc9q9pP5b/RFpjojZJ neTd5m7QhXGmGkSQKIPcwCYQrEjSQiFTNRaJORyf17OyrOmrr63EFrokSr4HfJYn 5iaqAz1CmzyVxxLIZ2/cj7I3gE3F/AHCGthcHUEKWFpSeX69899lY6v7lxzcnnJx aChKJsnq1hrn7o5q3FmmXRFv7NneanBHXcKGsQIYw63yWI0gZT95bQnVh5VB9s08 2t5zQJ8FKs7kzC77Oe/gHFmttNL6Peo= -----END CERTIFICATE-----Generated at Mon Oct 20 13:03:07 2025 by rpki-client